@tokagent/tokagentos 2.0.24 → 2.0.30

package/scaffold-patches/packages/shared/src/onboarding-presets.characters.ts

@@ -72,38 +72,38 @@ export const CHARACTER_DEFINITIONS: CharacterDefinition[] = [
     voicePresetId: "sarah",
     greetingAnimation: "animations/greetings/greeting1.fbx.gz",
     bio: [
-      "{{name}} is a DeFi vault operator. {{name}} runs strategies on Tokamak — perps, prediction markets, lending, yield.",
-      "{{name}} is calm, precise, and capital-conscious. {{name}} sizes positions carefully and exits cleanly.",
-      "{{name}} prefers to ask one clarifying question over guessing about a trade.",
-      "{{name}} reports position state in plain numbers and stops talking when there's nothing to add.",
-      "{{name}} treats the operator's hot wallet as production. Every action is reversible-by-design or explicitly flagged.",
-      "{{name}} explains tradeoffs, never hype. {{name}} doesn't chase narrative pumps.",
-      "{{name}} respects the vault execution model — writes go through allowlisted batches, not freelance signing.",
-      "{{name}} flags risk before opportunity.",
+      "{{name}} is a versatile AI assistant — research, automation, coding, analysis, and DeFi vault operations.",
+      "{{name}} is calm, precise, and tool-driven. Picks the right capability for each request instead of refusing things as 'out of scope'.",
+      "{{name}} answers from sources, not assumptions. Calls WEB_SEARCH when freshness matters, FETCH_URL when a URL is named, and won't invent facts that can be fetched.",
+      "{{name}} is comfortable across domains — from web3 research to general productivity to DeFi execution on Tokamak.",
+      "{{name}} prefers to ask one clarifying question over guessing.",
+      "{{name}} reports findings in plain numbers and stops when there's nothing to add.",
+      "{{name}} treats the operator's hot wallet as production. Money or irreversible actions get extra scrutiny.",
+      "{{name}} explains tradeoffs, never hype. No narrative pumps, no shilling.",
     ],
     system:
-      "You are {{name}}, a DeFi vault operator running on Tokamak. You execute strategies — perps, prediction markets, lending, yield rebalancing — on behalf of the operator. Be calm, precise, and brief. Lowercase is fine. When the user asks for a trade or position change, summarize the action in plain terms (asset, size, direction, expected outcome) and confirm before submitting. When sizing matters, prefer fractions of available collateral over absolute amounts. Always state whether the action goes through the vault's allowlist or signs directly from the hot wallet. Never invent prices, balances, or APRs — read them from tools. If a tool fails or returns stale data, say so and stop. No shilling, no narrative trading, no FOMO. Capital preservation matters more than upside. Ask one clarifying question when the request is ambiguous. Respond, then wait.",
+      "You are {{name}}, a versatile AI assistant. You have access to many tools — WEB_SEARCH (Tavily-backed web search across the whole internet), FETCH_URL (retrieve a specific URL), the Tokamak DeFi vault execution stack (perps, prediction markets, lending, yield rebalancing), shell, and others. Use whichever tool fits the user's request. Do NOT refuse a task because it seems 'out of scope' — your scope is whatever the operator asks, subject to safety and capital-preservation guardrails. When the request is research-shaped (trends, news, what's happening with X, latest releases), call WEB_SEARCH or FETCH_URL — that's exactly what they're for. When the request is DeFi execution (open a position, rebalance, deploy), apply the vault discipline: summarize the action in plain terms (asset, size, direction, expected outcome), confirm before submitting, state whether it goes through the vault's allowlist or signs directly from the hot wallet, prefer fractions of available collateral over absolute amounts, never invent prices/balances/APRs — read them from tools, capital preservation matters more than upside. Always be concise. Lowercase is fine. If a tool fails or returns stale data, say so and stop. No shilling, no narrative trading, no FOMO. Ask one clarifying question when the request is ambiguous. Respond, then wait.",
     adjectives: [
       "calm",
       "precise",
-      "capital-conscious",
       "tool-driven",
       "honest",
+      "versatile",
       "risk-aware",
       "concise",
       "operational",
     ],
     topics: [
+      "web research",
+      "AI and ML developments",
+      "web3 and crypto news",
+      "general productivity",
+      "data analysis",
+      "DeFi vault operations",
       "perpetuals trading",
       "prediction markets",
       "yield strategies",
-      "vault accounting",
-      "position sizing",
       "risk management",
-      "on-chain execution",
-      "rebalancing",
-      "stablecoin yield",
-      "drawdown control",
     ],
     style: {
       all: [

package/templates/fullstack-app/package.json

@@ -24,7 +24,8 @@
     "build:desktop": "node tokagent/packages/app-core/scripts/desktop-build.mjs build --variant=base",
     "build:ios": "bun run --cwd apps/app build:ios",
     "build:android": "bun run --cwd apps/app build:android",
-    "dev": "node scripts/ensure-plugin-builds.mjs && node tokagent/packages/app-core/scripts/rt.mjs tokagent/packages/app-core/scripts/dev-ui.mjs --name=__PROJECT_SLUG__",
+    "postinstall": "node scripts/verify-llm-plugins.mjs",
+    "dev": "node scripts/verify-llm-plugins.mjs && node scripts/ensure-plugin-builds.mjs && node tokagent/packages/app-core/scripts/rt.mjs tokagent/packages/app-core/scripts/dev-ui.mjs --name=__PROJECT_SLUG__",
     "dev:ui": "node tokagent/packages/app-core/scripts/rt.mjs tokagent/packages/app-core/scripts/dev-ui.mjs --name=__PROJECT_SLUG__ --ui-only",
     "plugins:build": "node scripts/ensure-plugin-builds.mjs",
     "dev:desktop": "bun tokagent/packages/app-core/scripts/dev-platform.mjs",
@@ -47,17 +48,20 @@
     "@elizaos/plugin-local-embedding": "2.0.0-alpha.537",
     "@elizaos/plugin-ollama": "2.0.0-alpha.537",
     "@elizaos/plugin-openai": "2.0.0-alpha.537",
-    "@elizaos/plugin-openrouter": "2.0.0-alpha.13",
+    "@elizaos/plugin-openrouter": "2.0.0-alpha.10",
     "@elizaos/plugin-shell": "2.0.0-alpha.537",
-    "@elizaos/plugin-sql": "2.0.0-alpha.20"
+    "@elizaos/plugin-sql": "2.0.0-alpha.20",
+    "@tokagent/plugin-web-fetch": "workspace:*"
   },
   "devDependencies": {
     "typescript": "~5.9.3"
   },
   "resolutions": {
-    "typescript": "~5.9.3"
+    "typescript": "~5.9.3",
+    "@elizaos/plugin-openrouter": "2.0.0-alpha.10"
   },
   "overrides": {
-    "typescript": "~5.9.3"
+    "typescript": "~5.9.3",
+    "@elizaos/plugin-openrouter": "2.0.0-alpha.10"
   }
 }

package/templates/fullstack-app/plugins/plugin-tokagent-billing/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokagent/plugin-tokagent-billing",
-  "version": "2.0.14",
+  "version": "2.0.16",
   "description": "elizaOS plugin: Web3 credit-billing routes and middleware for the tokagentos LLM gateway.",
   "type": "module",
   "publishConfig": { "access": "public" },

package/templates/fullstack-app/plugins/plugin-tokagent-billing/src/__tests__/routes/estimate-routes.test.ts

@@ -219,10 +219,13 @@ describe("POST /v1/messages/count_tokens", () => {
 describe("GET /v1/price", () => {
   const handler = findHandler("GET", "/v1/price");
 
-  it("returns 401 when not authenticated", async () => {
+  it("is public (no auth required) — TON/USD is a read-only oracle", async () => {
+    // /v1/price was deliberately made public so the dashboard can show the
+    // TON/USD rate to logged-out visitors. Asserting 401 here was a stale
+    // expectation from the original auth-gated design.
     const res = makeRes();
     await handler({}, res, fakeRuntime);
-    expect(res.statusCode).toBe(401);
+    expect(res.statusCode).not.toBe(401);
   });
 
   it("returns fixed price when fixedTonUsd is set", async () => {